whatnexapper[.]top

This domain, whatnexapper.top, is currently active and classified as a high-risk credential phishing site specifically targeting Microsoft 365 users. Analysis indicates the infrastructure is designed to harvest corporate login credentials by presenting fraudulent authentication portals that closely resemble legitimate Microsoft services. The domain remains operational and poses a significant threat to enterprise security, particularly in sectors reliant on cloud-based productivity suites. Infrastructure analysis reveals multiple high-confidence threat indicators. The domain was registered on June 23, 2026, through Global Domain Group LLC, a registrar frequently associated with malicious registrations. It resolves to the IP address 188.114.96.3, which has been flagged in multiple blocklists for hosting phishing content. Security vendors on VirusTotal have detected the domain, with 19 out of 95 engines marking it as malicious. Notably, the domain employs an SSL certificate issued by Google Trust Services, a tactic commonly used by threat actors to lend an appearance of legitimacy to fraudulent sites. The creation date, combined with the rapid detection by security vendors, suggests a coordinated phishing campaign with a short operational lifespan. Current status indicates the domain remains active and continues to resolve to its hosting IP. Organizations are advised to implement immediate countermeasures, including blocking the domain and its associated IP at the network perimeter. Security teams should prioritize monitoring for any authentication attempts originating from this domain, particularly those involving Microsoft 365 endpoints. End-user education should emphasize the risks of credential phishing and the importance of verifying SSL certificates and domain names before entering sensitive information. Proactive hunting for related indicators of compromise, such as the IP address and registrar details, is recommended to identify potential lateral movement or persistent access within affected networks.